Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2.roa
File:                     d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2.roa (raw, json)
Hash identifier:          quVHPUj6h/Ity1VraKOKlE6202j7WIHIwnD4jqAPzvc=
Subject key identifier:   B4:D3:8B:8B:2C:12:52:82:87:C5:67:5B:F3:F5:57:1F:4F:03:CD:0B
Certificate issuer:       /CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
Certificate serial:       03475D
Authority key identifier: E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2.roa
Signing time:             Mon 18 Dec 2023 19:33:29 +0000
ROA not before:           Mon 18 Dec 2023 19:33:29 +0000
ROA not after:            Thu 18 Dec 2025 19:33:29 +0000
asID:                     273114
IP address blocks:        2803:790::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214877 (0x3475d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=471ef7aaaf38c368d3312e68f494e839fe6f6b9b
        Validity
            Not Before: Dec 18 19:33:29 2023 GMT
            Not After : Dec 18 19:33:29 2025 GMT
        Subject: CN=d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:79:5b:9b:61:79:9a:8f:ed:6f:83:ab:98:
                    ae:a5:9c:6a:60:33:87:0d:dd:12:9f:4f:a1:20:39:
                    25:ce:ac:f1:d8:86:f0:22:a7:5a:95:30:69:8e:63:
                    14:e6:00:d3:05:cd:c7:c1:97:dc:02:b9:d3:b5:a9:
                    a3:eb:2b:41:1e:b9:92:95:d3:6b:4f:20:42:d0:0b:
                    cc:70:d1:cf:4b:87:a0:b1:b0:ed:38:23:eb:50:02:
                    ef:c4:75:ae:24:9c:ec:17:da:85:b4:b8:dc:62:27:
                    f1:1f:99:32:0e:75:18:82:03:41:b0:71:f5:17:d8:
                    87:11:87:9e:6e:3f:3d:70:ee:c0:04:18:66:9f:cc:
                    20:ad:4c:94:b5:f2:7a:ce:70:b6:42:8c:9b:16:2f:
                    54:41:bf:be:7e:9c:cc:29:de:54:72:0f:2a:72:41:
                    ef:b0:3a:b4:ae:c0:03:55:c1:7c:10:f7:40:0e:b5:
                    e1:2a:6a:d1:1a:4c:bb:7d:f3:35:67:e8:c3:f7:84:
                    f8:d2:71:66:55:fa:27:61:e3:ee:9a:26:ef:4f:48:
                    a3:be:f6:52:df:1e:2a:19:66:d7:b4:2d:9c:97:a2:
                    3a:93:fc:99:ac:67:8c:48:09:b2:06:1f:4b:83:06:
                    a2:bb:60:c4:82:24:c2:fc:6e:f9:ad:23:02:36:18:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D3:8B:8B:2C:12:52:82:87:C5:67:5B:F3:F5:57:1F:4F:03:CD:0B
            X509v3 Authority Key Identifier:
                keyid:E6:CA:68:CC:BD:9F:8B:68:62:BC:86:9F:D0:56:59:DE:DE:66:59:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/d0661e74131bdcecfa773cc5fd43bbfa8fd7a1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d711bda0-f136-479b-991f-56ffc14272cb/471ef7aaaf38c368d3312e68f494e839fe6f6b9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:790::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:a0:7a:bb:a8:4d:f3:6e:7a:db:07:18:79:e5:32:63:24:55:
         bf:34:43:88:f9:cd:f3:3a:f9:46:50:4f:3d:05:98:aa:1e:f9:
         1d:3d:c0:a1:bb:4b:2a:08:6f:5d:bc:a4:85:3f:72:49:8a:94:
         f4:58:4f:6c:60:3f:18:ef:21:9f:d8:35:78:94:af:b1:4d:99:
         fb:c0:de:77:9d:b8:c6:0e:68:9b:b4:6c:55:b3:06:0b:48:c0:
         6e:c2:70:6b:8d:de:02:d6:db:19:a2:a3:7a:90:c0:f2:24:86:
         48:b6:e0:9e:5d:bd:50:d6:0f:d3:b6:fd:12:ea:fd:12:e0:37:
         0d:e4:25:b7:bb:5c:b0:43:d5:a7:55:fb:64:c1:0a:51:2b:be:
         1a:ed:b2:38:67:44:ac:71:58:83:75:fc:87:3a:33:e5:e5:d2:
         15:87:41:b6:9a:fb:2a:51:5e:37:76:a7:99:e0:2c:f2:91:13:
         9f:d2:4d:c7:f7:68:72:1b:ab:12:48:d3:b4:d8:12:bd:df:f6:
         78:a4:f2:a0:cc:b9:09:24:19:41:9a:a5:51:b9:93:78:9a:fd:
         b4:fb:6f:b0:fc:36:f5:f7:20:1f:b4:76:28:04:5f:c5:da:a8:
         99:ea:30:7c:70:55:53:8f:1c:60:40:ad:06:4d:0f:b8:9c:e0:
         a0:58:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----